Cookie Stealing Google Docs Presented at Teched 2010US

This is a demo of Cookie Stealing google docs that was presented at Teched US 2010.

Scenario: Someone is logging on to Google Docs over a wireless network or a network segment that can be sniffed by a hacker. [Like the open Wireless network @ TechED ;)]
Attack:  The cookies are sniffed and user by the hacker to access the target Google Doc account.

Stay safe, use SSL and examine the certificate of the server!

/Marcus Murray @ Truesec


Tags:
Categories: Hacking | TechED 2010 NA | Blog

121 Comments
Actions: E-mail | Permalink | Comment RSSRSS comment feed